Direct Supply, Inc. builds technology for a sector where downtime isn't abstract - it's a building management system failing in a senior care facility at 2 a.m. The Milwaukee-headquartered company operates TELS, a building management platform, and DSSI, a procurement system, both designed exclusively for senior living communities. Their stack touches AI-driven solutions, real-time data analytics, and procurement automation, connecting over 30,000 buildings. That's a sprawling attack surface: HVAC controls, supply chain data, PII tied to vulnerable populations, operational tech managing physical infrastructure in care environments.
The threat model here is concrete. Senior living facilities sit at the intersection of healthcare data regulations, aging OT systems, and procurement workflows that move sensitive vendor and resident information. Direct Supply's platforms handle building controls and purchasing at scale, meaning security work spans application hardening, data protection across analytics pipelines, and securing integrations between procurement and facility management systems. The company is employee-owned, which tends to shift incentive structures toward long-term engineering quality over short-term growth metrics.
For security practitioners, the draw is specificity: you're not defending a generic SaaS platform - you're working on systems where the operational context (care facilities, regulated health data, physical infrastructure) shapes every threat decision. The technical domains - AI, real-time analytics, building management, procurement automation - each carry distinct security concerns, from model integrity to OT protocol hardening to supply chain integrity.
